Privacy Policy

Summary

BairePorbo is a small product built for Bangladeshi students looking for scholarships. We try to collect as little as possible. Here's the short version:

• We only collect what you give us (account info, profile fields, chat questions).
• We use that data to operate the product — finding scholarships, generating AI summaries, and improving matching.
• We don't sell your data. We don't use it for advertising.
• You can delete your account and data at any time by emailing us.

The sections below explain the details. If anything is unclear, email support@baireporbo.app.

Data we collect

Account information

When you sign up, we store your email address and a password hash via our authentication provider, Supabase. If you sign in with Google, we receive your email and basic profile information from Google.

Profile information

You may optionally fill in fields like your CGPA, university, target degree level, preferred countries, IELTS / TOEFL score, research interests, and goals. These improve the accuracy of AI-powered scholarship matching. Filling these fields is entirely optional.

Mentor chat content

The questions you ask the AI mentor and the answers it generates are stored on your account so you can return to past conversations. Anonymous (logged out) chats are not stored on our servers.

Bookmarks and activity

Scholarships you bookmark are linked to your account so you can find them later. We log basic request metadata (timestamps, IP address, model used) for rate limiting and debugging — these logs are kept for up to 30 days.

What we don't collect

• We do not use third-party advertising trackers or analytics that share data with advertisers.
• We do not collect biometric data, location data, or device sensor data.
• We do not require you to upload identity documents or transcripts.

How we use your data

We use the information you provide to:

• Authenticate your account and keep it secure.
• Match you with scholarships using AI based on your profile.
• Generate plain-language summaries and answers via large language models.
• Show you bookmarks, chat history, and personalised dashboard content.
• Enforce rate limits to keep the service available and prevent abuse.
• Communicate operational messages such as email confirmation and password resets.

We do not use your personal data for advertising, profiling for third parties, or any commercial purpose beyond running BairePorbo.

Third-party services we use

BairePorbo is powered by a small set of trusted infrastructure providers. Each receives only the data needed for its specific function:

• Supabase hosts our database and handles authentication. All your account, profile, bookmark, and chat data is stored here.
• Vercel hosts the application. They process requests and standard server logs.
• OpenRouter routes your AI mentor questions to models like DeepSeek and Mistral. The contents of your messages are sent to these providers solely to generate a response. We do not include identifying information (your name or email) in the prompt.
• NVIDIA NIM generates the embeddings used to search our scholarship database. Profile snippets used for AI matching are sent here.
• Email delivery (Supabase or our SMTP provider) sends confirmation, password reset, and operational emails.

Each provider has its own privacy practices. We pick providers that publish clear policies and don't retain user prompts to train their models.

AI prompt caching

To reduce cost and improve response time, we cache anonymised AI responses for popular questions (for example, “What is Chevening?”) for up to 24 hours. The cache is keyed by question content only — never by your identity. If two users ask an identical question, they may receive the same cached answer.

If you ask a personal or specific question (one that includes your CGPA or background details), it is treated as a follow-up and is not eligible for caching.

Your rights

You have the right to:

• Access the data we hold about you. Most of it is visible on your profile and dashboard pages already.
• Correct any inaccurate information by editing your profile.
• Delete your account, chat history, bookmarks, and profile at any time. Email support@baireporbo.app from the email on your account and we will remove everything within 14 days.
• Export your data in a machine-readable format on request.
• Withdraw consent by deleting your account.

Data security

We use HTTPS for all traffic. Database access is restricted to authenticated users via row-level security policies. Passwords are never stored in plaintext — they are hashed by our authentication provider.

BairePorbo is a small project. We do our best to keep your data safe, but no system is perfectly secure. If we ever discover a breach affecting your account, we will notify you within 72 hours of confirming it.

Children

BairePorbo is intended for students of higher-education age. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, email support@baireporbo.app and we will delete it.

Where your data is stored

Our database and authentication services are hosted on Supabase. The application itself runs on Vercel. AI providers process requests on their own infrastructure. Some of these services may store data outside Bangladesh. By using BairePorbo, you consent to this cross-border processing.

Changes to this policy

If we materially change this policy, we will update the “last updated” date at the top and, where appropriate, notify you by email. Continued use of BairePorbo after changes means you accept the updated policy.